Privacy

1What we hold

• An email address, or a Google account identifier if you signed in that way.
• Your username, and a photo and bio if you add them.
• What you stash, collect, like and follow.
• Server logs (IP address, user agent, page, timestamp) for security and abuse handling.

In short: an address to sign you in, a username, what you keep, and short-lived logs.

2What we deliberately do not hold

No payment details, there is nothing to pay for. No real name; we never ask and never display the one Google gives us. No advertising profile built from your viewing, and no sale of anything about you to anyone. What you watch is not compiled into a profile that follows you off this site.

In short: no card, no real name, no profile sold onward.

3What is public

Your username, your stashes, your collections and your communities are public. That is what the archive is. Your likes are public on your profile. Your email address, your Google identity and your IP address never are.

Anything public is visible to search engines and can be copied by anyone who sees it. Decide what goes under your name on that basis.

In short: username and what you keep: public. How you signed in: never.

4Who else is involved

• Google, only if you use it to sign in. It learns you signed in to GayStash. We ask for an email address and nothing else, and we never post anywhere on your behalf.
• Cloudflare, which sits in front of the site and sees request metadata.
• An advertising network, on record pages, for signed-out readers only. Its script runs in your browser and opens a new tab with an advert in it. It can see your IP address, your browser and the page you were on, and what it does after that is governed by its own policy, not ours. Signing in stops it loading at all.
• The sites we link to. Once you follow a link you are on their property under their policy, and we have no visibility of or control over what they do.

In short: Google if you use it, our CDN, one ad network on record pages when signed out, and every host you click through to.

5Cookies

A session cookie to keep you signed in, and two short-lived ones while you are signing in with Google. We set no advertising cookies; the ad network described above may set its own, which is how it limits how often you see it. Blocking cookies leaves the archive readable; it stops sign-in working.

In short: one cookie to sign you in, and nothing for advertising.

6How long

• Server logs: kept briefly, for security and abuse handling.
• Account data: while the account exists.
• Moderation and abuse records: retained after deletion where we are required to, or to stop a terminated account returning.
• Reports concerning a minor: retained and reported as the law requires, and this is not negotiable on request.

In short: logs briefly. Safety records outlive the account, by design.

7Deleting

Deleting removes your profile, photo, bio, collections, likes, follows and comments. Your stashes stay, shown as kept by a deleted account. They are links other people's collections point at, and removing them would break pages that are not yours. This is stated on the deletion screen before you confirm, and you can ask us to remove specific records.

In short: the account goes, the links stay and stop being attributed to you.

8Your rights

Depending on where you live you may have the right to access, correct, export, delete or restrict what we hold, and to object to processing. Ask and we will action it inside 30 days. We will not ask you for identification you have not already given us in order to prove who you are. On a site like this, demanding a passport to exercise a privacy right is its own privacy problem.

In short: access, export or delete on request, without demanding new ID from you.

9Contact